This vulnerability (CVE-2026-92014) involves incorrect boundary conditions in the Graphics component of mozjs52, leading to privilege escalation. The flaw allows an attacker to gain elevated privileges by exploiting improper handling of boundary checks. The vulnerability was addressed and fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16. Affected versions include numerous specific builds of mozjs52 as listed, all prior to the fixed versions. The CVSS 3.1 base score is 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), reflecting a network attack vector with low attack complexity, no privileges required, user interaction needed, unchanged scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability can lead to privilege escalation, allowing an attacker to gain higher-level access than intended. The CVSS score of 8.8 indicates a high severity impact on confidentiality, integrity, and availability of the affected systems. However, no known exploits in the wild have been reported.

This vulnerability has been fixed in Firefox ESR 115.41, Firefox ESR 140.16, and Thunderbird 140.16. Users and administrators should update to these or later versions to remediate the issue. No additional mitigation steps are indicated beyond applying the official patches.